1.
Which statement about Kerberos authentication is not true?
- A.A user receives a Kerberos ticket after authenticating to the server. This ticket is next decrypted with the user password and will be sent back to the KDC server.
- B.To authenticate, the user password is sent to the KDC, which checks the password and based on that hands out an authentication ticket.
- C.The Kerberos ticket is used each time a Kerberized service is accessed.
- D.Kerberos passwords are used as a symmetric key to encrypt and decrypt Kerberos tickets.
- Answer & Explanation
- Report
Answer : [B]
Explanation :
Explanation :
| One of the essential things in Kerberos is that at no time passwords are sent over the network. |
2.
A Kerberos principal name normally contains three parts. Which of the following
is not among these?
- A.Primary
- B.Domain
- C.Instance
- D.Realm
- Answer & Explanation
- Report
Answer : [B]
Explanation :
Explanation :
| The DNS name is not a part of a principal name. Instead of a DNS name, the instance part is used. This can be a DNS name, but it can also be another type of identifier for the host. |
3.
Kerberos enable services need to store their password in a file so that they can
start up automatically. If default names are used, which of the following files
would be used for that purpose?
- A./etc/krb5.keytab
- B./etc/krb5.conf
- C./etc/krb.principal
- D./etc/krbpasswd
- Answer & Explanation
- Report
Answer : [A]
Explanation :
Explanation :
| Kerberos passwords are stored in the keytab file. This file uses the default name /etc/krb5.keytab. |
4.
Which of the following services is not used for account information storage?
- A.LDAP
- B.NIS
- C./etc/passwd
- D.Kerberos
- Answer & Explanation
- Report
Answer : [D]
Explanation :
Explanation :
| Kerberos is an authentication service, which is used on top of account information services such as LDAP to guarantee secure authentication. |
5.
Which of the following is not commonly used as a remote authenticationrelated
service that runs on RHEL 7?
- A.OpenLDAP
- B.Kerberos
- C.NIS
- D.IdM
- Answer & Explanation
- Report
Answer : [C]
Explanation :
Explanation :
| NIS is a legacy service used for managing identities and authorization, and is not used much anymore on current Linux versions. |
|
|
||||||||||||||||||||||||||||
